Threat actors are actively weaponizing a critical command injection vulnerability in the Zimbra Collaboration Suite (CVE-2026-73570). The flaw allows unauthenticated remote code execution, enabling attackers to drop web shells, compromise mailbox data, and harvest credentials. Administrators should apply the official security patches immediately.

ZimbraRCECVE-2026-73570Web Shell
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →